Canvas LMS SSO | Integrate SAML login into Canvas using Drupal as IDP

Drupal Canvas LMS Integration will allow you to integrate Single Sign-On ( SSO ) login between your Drupal site and Canvas LMS. Canvas SSO integration with your Drupal site will help your users to login into Canvas LMS using their Drupal credentials. The Drupal SAML IDP - SAML 2.0 Identity Provider SSO module is compatible with Drupal 7, Drupal 8 as well as Drupal 9.
Here we will go through a step-by-step guide to configure SAML SSO login between Drupal website as IdP ( Identity Provider ) and Canvas LMS as SP ( Service Provider ).

If you have any doubts or queries, you can contact us at drupalsupport@xecurify.com. We will help you to configure the module. If you want, we can also schedule an online meeting to help you configure the Drupal SAML IDP 2.0 Single Sign On (SSO) - SAML Identity Provider module.

Steps to configure Canvas Lms SAML Single Sign-On (SSO) Login into Drupal site

1. Configure Drupal as Identity Provider

• Go to IDP Metadata, Copy the IDP Entity ID/Issuer and SAML Login URL and Keep it handy.

• In the Service Provoder Setup tab, you can enter the name of Service Provider as Canvas (Canvas Lms as SAML SP).
• Navigate to the Service Provider Setup tab of the miniOrange SAML Identity Provider module on your Drupal site. There are two way to configure your Identity Provider ( Drupal as SAML IDP ):

A. By Uploading SP metadata:

• Click on UPLOAD SP METADATA link.
• You can either Upload Metadata File and click on Upload button or use a Upload Metadata URL and click on Fetch Metadata.


B. Manual Configuration:

• Navigate to Service Provider Setup tab of the miniOrange Drupal IDP module.
• Provide the required settings (i.e. Service Provider Name, SP Entity ID or Issuer, ACS (Assertion Consumer Service) URL, X.509 Certificate (Optional)) as provided by your Service Provider Canvas ( Canvas Lms as SP ).

Service Provider Name	Enter any appropriate name for your Service Provider.
SP EntityID	https://your_domain.acme.instructure.com/saml_consum
ACS URL	https://your_domain.acme.instructure.com/saml_consume

• Click on the Save Configuration button to save your configuration. Then click on Test Configuration button to test your configuration.

2. Configure Canvas Lms as Service Provider

• Login to your Canvas LMS domain as an Account Administrator.
• Switch to Admin View.

• Go to Courses and under Managed Accounts, click on your domain name.

• Click on Authentication in the left pane and select SAML from the Choose an authentication service drop down list.

• Under Current Integration, click on Add New SAML Config and enter the details as shown:


IdP Entity ID	Copy IDP Entity ID / Issuer from IDP Metadata tab in Drupal SAML IDP module and paste it.
Log On URL	Copy SAML Login URL from IDP Metadata tab in Drupal SAML IDP module and paste it.
Log Out URL	Copy SAML Logout URI from IDP Metadata tab in Drupal SAML IDP module and paste it.
Certificate Fingerprint	Follow the steps below to copy the Thumbprint of certificate: 1. Open the certificate that was downloaded earlier. 2. Go to Details and in the field column select Thumbprint. 3. Copy the Thumbprint that opens in the pane by pressing CTRL+C (Right-Click won’t work!). 4. Paste the Thumbprint in the Certificate Fingerprint. Make sure that there are no spaces in between the Certificate Fingerprint. Remove them manually.
Login Attribute	NameID
Identifier Format	urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
Authentication Context	urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport
Login Label	Username
Unknown User Url	Leave blank.